Debian Patches

Status for freeipa/4.12.4-2

Patch Description Author Forwarded Bugs Origin Last update
dnssec-race-wa.diff diff --git a/ipaserver/install/opendnssecinstance.py b/ipaserver/install/opendnssecinstance.py
index 95029fd5e..9b800f509 100644
no
fix-sssd-socket-activation.diff no
map-ssh-service.diff no
Make-path-of-Samba-lock-directory-configurable-and-u.patch [PATCH] Make path of Samba lock directory configurable and use /run/samba on Debian Frederik Himpe <frederik@frehi.be> no 2025-02-27
Make-name-of-nobody-group-configurable-and-use-nogro.patch [PATCH] Make name of nobody group configurable and use nogroup on Debian Frederik Himpe <frederik@frehi.be> no 2025-02-25
0001-ipalib-x509-support-PyCA-44.0.patch [PATCH] ipalib/x509: support PyCA 44.0
PyCA made x509.Certificate class concrete, it cannot be extended anymore
by Python code. The intent is to use helper functions to instantiate
certificate objects and never create them directly.

FreeIPA wraps PyCA's x509.Certificate class and provides own shim
on top of it. In most cases we load the certificate content via the
helper functions and don't really need to derive from the certificate
class.

Move IPACertificate to be a normal Python object class that stores
x509.Certificate internally. The only place where this breaks is when
IPACertificate object needs to be passed to a code that expects
x509.Certificate (Dogtag PKI). In such cases, expose the underlying
certificate instance via IPACertificate.cert property.
Alexander Bokovoy <abokovoy@redhat.com> no 2024-12-01

All known versions for source package 'freeipa'

Links